Cloud Security Engineer

ECS is seeking a Cloud Security Engineer to support its Homeland Security Solutions department from its Arlington, Virginia office or remotely. The role focuses on end-to-end vulnerability management, cloud security tooling across AWS, Azure, and GCP, architecture reviews, remediation, ATO support, continuous monitoring, reporting, and security automation.

Responsibilities:

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments
• Conduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devices
• Perform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verification
• Partner with platform, cloud, and application teams to drive sustainable remediation outcomes
• Implement, operate, and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and GCP
• Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls
• Support static, dynamic, container, and dependency scanning and help dev teams understand and fix what’s found
• Perform secure configuration reviews against DISA STIGs and other security baselines
• Automate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and Terraform
• Manage certificate lifecycle including inventory, renewal tracking, and deployment coordination
• Support ATO activities, POA&M management, and RMF Step 6 continuous monitoring
• Build and maintain runbooks, technical reports, executive dashboards, and risk summaries
• Assist during security audits and incident response investigations involving vulnerable systems
• Protype and provide training on new tools and solutions

Requirements:

• • Must have US citizenship.
• • Ability to pass a Public Trust investigation.
• • Bachelor's degree in a related field.
• 7 years of overall IT experience, with at least 3 years focused specifically on cloud security or vulnerability management
• CISSP, CISA, CISM, or relevant cloud provider certifications required
• Hands-on scripting experience in Python, Bash, or PowerShell
• Familiarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001
• Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practice
• Experience generating AI GPT prompts the produce the expected output